libspring-java vulnerabilities (Ubuntu)
87 vulnerabilities.
libspring-javaUbuntuCVE-2024-38816: Path traversal vulnerability in functional web frameworks7.5 Highlibspring-javaUbuntuCVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader6.3 Mediumlibspring-javaUbuntuCVE-2024-38808: Spring Expression DoS Vulnerability4.3 Mediumlibspring-javaUbuntuCVE-2024-22262: Spring Framework URL Parsing with Host Validation8.1 Highlibspring-javaUbuntuCVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)8.1 Highlibspring-javaUbuntuCVE-2024-22243: Spring Framework URL Parsing with Host Validation8.1 Highlibspring-javaUbuntuSpring Framework server Web Observations DoS Vulnerability5.3 Mediumlibspring-javaUbuntuSpring Framework vulnerable to denial of service6.5 Mediumlibspring-javaUbuntuSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch7.5 Highlibspring-javaUbuntuSpring Framework vulnerable to denial of service via specially crafted SpEL expression6.5 Mediumlibspring-javaUbuntuSpring Security authorization rules can be bypassed via forward or include dispatcher types9.8 Criticallibspring-javaUbuntuspring-security-oauth2-client vulnerable to Privilege Escalation8.1 Highlibspring-javaUbuntuInteger overflow in BCrypt class in Spring Security5.3 Mediumlibspring-javaUbuntuAuthorization bypass in Spring Security9.8 Criticallibspring-javaUbuntuAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Mediumlibspring-javaUbuntuDenial of service in Spring Framework5.3 Mediumlibspring-javaUbuntuImproper handling of case sensitivity in Spring Framework5.3 Mediumlibspring-javaUbuntuAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Mediumlibspring-javaUbuntuRemote Code Execution in Spring Framework9.8 Criticallibspring-javaUbuntuLog entry injection in Spring Framework4.3 Mediumlibspring-javaUbuntuImproper Output Neutralization for Logs in Spring Framework4.3 Mediumlibspring-javaUbuntuRFD Protection Bypass via jsessionid8.7 Highlibspring-javaUbuntuCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux5.3 Mediumlibspring-javaUbuntuRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application8.0 Highlibspring-javaUbuntuDoS Attack via Range Requests7.5 Highlibspring-javaUbuntuModerate severity vulnerability that affects org.springframework:spring-core7.5 Highlibspring-javaUbuntuSpring Framework Cross Site Tracing (XST)5.9 Mediumlibspring-javaUbuntuDenial of Service in org.springframework:spring-core6.5 Mediumlibspring-javaUbuntuSpring Framework allows applications to expose STOMP over WebSocket endpoints9.8 Criticallibspring-javaUbuntuImproper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core5.3 Mediumlibspring-javaUbuntuSpring Security and Spring Framework may not recognize certain paths that should be protected7.5 Highlibspring-javaUbuntuPivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized7.5 Highlibspring-javaUbuntuFiles or Directories Accessible to External Parties in org.springframework:spring-core9.6 Criticallibspring-javaUbuntuPivotal Spring Framework DoS Attack with XML Input5.5 Mediumlibspring-javaUbuntuImproper Restriction of XML External Entity Reference in Spring Framework8.8 Highlibspring-javaUbuntuImproper Limitation of a Pathname to a Restricted Directory in Spring Framework5.0 Mediumlibspring-javaUbuntuImproper Limitation of a Pathname to a Restricted Directory in Spring Framework5.0 Medium